Description
Improper access checks in M-Files Server before 25.12 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled.
INFO
Published Date :
2025-12-18T07:32:34.230Z
Last Modified :
2025-12-18T15:02:15.225Z
Source :
M-Files Corporation
AFFECTED PRODUCTS
The following products are affected by CVE-2025-14318 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-14318.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability